github.com/dadrus/heimdall
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Heimdall: IP Spoofing via Unvalidated Forwarding Headers | github.com/dadrus/heimdallhttps://github.com/dadrus/heimdall | Go | High | Fix reported | |
| Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode | github.com/dadrus/heimdall | Go | High | Fix reported | |
| Heimdall: Case-sensitive host matching may lead to policy bypass | github.com/dadrus/heimdall | Go | High | Fix reported | |
| Heimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation | github.com/dadrus/heimdall | Go | High | Fix reported | |
| Heimdall has an authorization bypass via path normalization mismatch | github.com/dadrus/heimdall | Go | High | Fix reported | |
| Heimdall: Path received via Envoy gRPC corrupted when containing query string | github.com/dadrus/heimdall | Go | High | Fix reported |